CourseProfiler Privacy Policy
Last updated: 2026-06-29
CourseProfiler processes trail/race route and runner evidence data so users and API clients can
analyze courses, generate CRSProf/USRProf artifacts, estimate race plans, and export PDFs.
Data we process
- Course and activity files such as GPX, FIT, CRSProf, and USRProf.
- Course points, timestamps, elevation, distance, heart-rate/cadence data when present in uploaded evidence.
- Public HTTPS source URLs or CourseProfiler artifact IDs submitted to the API.
- Generated artifacts such as segmented course profiles, runner profiles, race plans, summaries, and PDFs.
- Operational metadata such as request IDs, job IDs, artifact IDs, timestamps, status, warnings, and error logs.
- Strava-derived activity data only when a user explicitly authorizes/imports it.
How we use data
- To import and validate course/profile data.
- To generate segments, estimates, comparisons, and race-plan PDF exports.
- To provide temporary job status, artifact metadata, and private download URLs.
- To diagnose failures, protect the service, and improve reliability.
Retention
- Public API jobs and artifacts are designed to expire after 30 days.
- Generated artifact download URLs are pre-signed, private, and short-lived.
- Temporary uploaded GPX, FIT, CRSProf, USRProf, and related files should be covered by storage lifecycle rules and removed automatically if not deleted sooner.
- Application logs may retain operational metadata for debugging and abuse prevention, but should avoid exposing raw uploaded file contents.
Sharing
We do not sell user data. We use infrastructure providers such as AWS to host storage, compute,
API, and delivery infrastructure. Artifact download URLs should be treated as private because anyone
with a valid pre-signed URL may access that artifact until the URL expires.
Security notes
Initial public API endpoints are unauthenticated. Do not submit sensitive personal information beyond
the course/activity data needed for the requested analysis. If an AI agent is using CourseProfiler on
your behalf, only provide source URLs or files you intend the service to process.
Contact
Questions or deletion requests: info@courseprofiler.com.
CourseProfiler home · Terms of Use · Public API